Cisco ISE change Domain Name
Our ISE deployment was setup with our internal domain name of csi.corp, when presenting the guest CWA this is the domain name the is presented to
the guest. We would like for this to be out public domain and a valid certificate. From what I have gathered the web portal https certificate must contain the FQDN of the ISE node, therefore I would need to change the domain name on the server(s). I have found posts that some have changed the domain name after deployment without any adverse results, is this possible? We are currently integrated with our corp AD and able to utilize this the EAP authentications. We have 2 nodes in our deployment, is it possible to change the domain name to our public domain without a rebuild?
Thanks,
Joe
Hmm, unless something has changed I don't believe this would work because:
- Even though the CN doesn't have to be an exact match of the FQDN, I believe that the domain suffix in the CN still must match the domain suffix in the FQDN. So you can have many different values and domains in the SAN fields but the domain in the CN field must match the domain specified in the FQDN. I don't have any certs to test this with now but I am pretty sure that even though the CSR generation would work, the process will fail when trying to import the cert.
- Is ".local.corp" a public domain? It doesn't sound like it but perhaps it is :) However, if it is not, then many public CAs won't issue you a public certificate for a private domain. You can definitely give it a try and see what they say :)
Let me know what you find out!
Thank you for rating helpful posts!
Similar Messages
-
Is it possible to change domain name
OS: SuSE Linux Enterprise Server 8
Oracle Version: 10.1.0.2.0
I have Oracle Database installed on SLES 8.
Is it possible to change domain name after database is running?
(Not in live production yet)
If yes where I need to make changes?
Regards,
Dfor the database, the dns domain is of no interrest. the parameter db_domain could be change dynamically, but it does not have to match the dns domain. In your sqlnet.ora, you can also define NAMES.DEFAULT_DOMAIN and the domain name in tnsnames.ora. But it does not have to match the dns domain.
HTH
Laurent -
Hello All,
We have oracle Database installed on RED HAT AS 3.1.
Database version is 9.2.0.5.0.
We also have two web servers connected to above database server.
Just before live production, Management asks me to change domain name.
1) My question is âDoes changing domain name effect any thing from Oracle DB perspective"?
2) Do I need to configure any thing from Oracle database?
Regards,
Diana Walescheck global_name view and set it according to new settings
Select * from global_name:
update globale_name set global_name='NEW_NAME' ;
commit;
you should log in as sys -
Change domain name BPC 10 for MS
Hi,
We will change domain name so I will need to change that in BPC for all the end users, which should not be a problem but for the service users running BPC, BPCInstall, BPCAdmin and BPCUser I guess it can/will be a problem.
Option 1 - reinstall SAP BPC
I have read a sap note(1451175) where they suggest to reinstall SAP BPC,http://service.sap.com/sap/support/notes/1451175
and also sap note(1692721),http://service.sap.com/sap/support/notes/1692721
If I do that the question is can I restore my environment(s) I have today or do they contain the "old" domain name users or is that only stored in the "appserver".
Option 2 - modify SAP BPC
Not recommended according to above note.
Do anyone have any experience in this or suggestions please let me know.
Brgds
Mattias FerlingMultiple primary zones work fine within you private DNS services, and would be the usual approach for the local DNS server.
The external (public) DNS services gets another translation and an MX (mail exchange) record that points at your public IP.
If you're renaming the host itself, you'll reset the name through Server Admin, and then verify the change by launching Terminal.app and issuing sudo changeip -checkhostname command. If that doesn't work, you might need to reset the host name via the changeip command; see man changeip for details.
One key piece of all this: your public mail server needs to be an A record, which means your public forward and reverse DNS for your mail server and your MX record and your public static IP address all match.
Your mail server will need to enable the new domain as a virtual host; that'll all it to receive mail for the new domain. -
Pb connecting from client to database after changing domain name
Hi,
I've got 3 databases wthis 3 listeners. all worked well since we change domain name. database server is in DMZ and is reconize witn 2 IP adresses.
I can ping with tnsping but when I run sqlplus user/passwd@ORACLE_SID I've got this message : ERROR:
ORA-12535: TNS : le dÚlai imparti Ó l'opÚration est ÚcoulÚ
on local host this command run well and connect to database.
is there somebody that knows this problem and its solution?
Thank you for your help.
PS: I'm on oracle 9.2.0 and windows200 server and clientI've got this message in listener.log
Démarré avec pid=3028
Ecoute sur : (DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC0ipc)))
Ecoute sur : (DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=bam_sgbd.imelios.com)(PORT=1522)))
TIMESTAMP * CONNECT DATA [* PROTOCOL INFO] * EVENT [* SID] * RETURN CODE
19-MAR-2004 14:21:33 * (CONNECT_DATA=(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=c:\oracle\ora92\bin\sqlplus.exe)(HOST=U0011001)(USER=BerPRE))) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.2.80.180)(PORT=2032)) * establish * ADRPRODR * 0
19-MAR-2004 14:34:36 * (CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=C:\oracle\ora92\bin\sqlplus.exe)(HOST=BAM_SGBD)(USER=BAM_SGBD))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.80.223)(PORT=2394)) * establish * ADRPRODR * 0
19-MAR-2004 14:40:53 * (CONNECT_DATA=(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=c:\oracle\ora92\bin\sqlplus.exe)(HOST=U0011001)(USER=BerPRE))) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.2.80.180)(PORT=2195)) * establish * ADRPRODR * 0
19-MAR-2004 14:44:18 * (CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=C:\oracle\ora92\bin\sqlplus.exe)(HOST=BAM_SGBD)(USER=BerPre))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.80.223)(PORT=2809)) * establish * ADRPRODR * 0
19-MAR-2004 14:57:52 * (CONNECT_DATA=(SERVER=DEDICATED)(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=C:\oracle\ora92\bin\sqlplus.exe)(HOST=BAM_SGBD)(USER=BAM_SGBD))) * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.80.223)(PORT=3413)) * establish * ADRPRODR * 0
19-MAR-2004 15:11:47 * (CONNECT_DATA=(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=c:\oracle\ora92\bin\sqlplus.exe)(HOST=U0011001)(USER=BerPRE))) * (ADDRESS=(PROTOCOL=tcp)(HOST=10.2.80.180)(PORT=2433)) * establish * ADRPRODR * 0
19-MAR-2004 15:55:59 * (CONNECT_DATA=(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=c:\oracle\ora92\bin\sqlplus.exe)(HOST=U0011001)(USER=BerPRE))) * (ADDRESS=(PROTOCOL=tcp)(HOST=IP_ADRESSE)(PORT=2561)) * establish * ADRPRODR * 0
19-MAR-2004 15:56:26 * (CONNECT_DATA=(SERVICE_NAME=ADRPRODR)(CID=(PROGRAM=c:\oracle\ora92\bin\sqlplus.exe)(HOST=U0011001)(USER=BerPRE))) * (ADDRESS=(PROTOCOL=tcp)(HOST=IP_ADRESSE)(PORT=2568)) * establish * ADRPRODR * 0
this seems to work pas on client connection doesn't arrive -
How to change domain name from "LocalHost" to ipaddress in Jdeveloper?
Hi
When i run any application from JDeveloper, the page opening with the URL keeping "*LocalHost*" as a domain name,
eg: http://*localhost*:7101/Testing/faces/index.jsf
How can i change the domain name from "localHost" to my system's ipaddress. So that whenever i execute the page, the page should open with the ipaddress and not with "localhost", like http://*10.34.65.175*:7101/Testing/faces/index.jsf
Regards
RajThank you Timo.
I changed domain name from "localhost" to ipaddress as you said, after that the server stopped working. Unable to run any application.
Then I changed it back to "localhost" and its working fine.
I am doing it for 2 reasons,
1) With localhost as domain name, I am unable to open ADF mobile browser application in Android emulator.
2) Unable to do remote debugging. Hope this could be the reason.
Regards
Raj -
ISE node registering after change domain-name
At Customer Site I changed the domain name of our 4 ISE server before they were registered to any deployment. I regenerated a self signed certificate and started to register the other nodes to the deployment. This went well for the 2 PSN nodes which have a ip address in a different subnet. I tried to register the presumed secondarry PAN/MnT node and got the following error message "
Node beiing registerd has FQDN 'ISE-PAN-AP02.office.intern' which cannot be resolved. Please check your DNS configuration."
My DNS config is in order.
Can anyone please tell me want possible can be the cause of this?Please check these Prerequisites:
The fully qualified domain name (FQDN) of the standalone node that you are going to register, for example, ise1.cisco.com must be DNS-resolvable from the primary Administration ISE node. Otherwise, node registration will fail. You must enter the IP addresses and FQDNs of the ISE nodes that are part of your distributed deployment in the DNS server.
•The primary Administration ISE node and the standalone node that you are about to register as a secondary node should be running the same version of Cisco ISE.
•Node registration fails if you provide the default credentials (username: admin, password: cisco) while registering a secondary node. Before you register a standalone node, you must log into its administrative user interface and change the default password (cisco).
•You can alternatively create an administrator account on the node that is to be registered and use those credentials for registering that node. Every ISE administrator account is assigned one or more administrative roles. To register and configure a secondary node, you must have one of the following roles assigned: Super Admin, System Admin, or RBAC Admin. See Cisco ISE Admin Group Roles and Responsibilities for more information on the various administrative roles and the privileges associated with each of them.
•If you plan to register a secondary Administration ISE node for high availability, we recommend that you register the secondary Administration ISE node with the primary first before you register other Cisco ISE nodes. If Cisco ISE nodes are registered in this sequence, you do not have to restart the secondary ISE nodes after you promote the secondary Administration ISE node as your primary.
•If you plan to register multiple Policy Service ISE nodes running Session services and you require mutual failover among those nodes, you must place the Policy Service ISE nodes in a node group. You must create the node group first before you register the nodes because you need to select the node group to be used on the registration page. See "Creating, Editing, and Deleting Node Groups" section for more information.
•Ensure that the Certificate Trust List (CTL) of the primary node is populated with the appropriate Certificate Authority (CA) certificates that can be used to validate the HTTPS certificate of the standalone node (that you are going to register as the secondary node). See the "Creating Certificate Trust Lists in the Primary Cisco ISE Node" section on page 12-24 for more information.
•After registering your secondary node to the primary node, if you change the HTTPS certificate on the registered secondary node, you must obtain appropriate CA certificates that can be used to validate the secondary node's HTTPS certificate and import it to the CTL of the primary node. See "Creating Certificate Trust Lists in the Primary Cisco ISE Node" section on page 12-24 for more information. -
Cisco ICM 7.2: change domain name
Hi all,
I have a IPCC system (ICM 7.2) in production with a domain name. Customer want to change the domain name recently. Does anyone have the same issue with me? Can you point me some related document and some risk when I change the domain name in Cisco ICM system? Will the system still work when I do the same.
Regards,
ThanhHi Irfan,
I don't want to do this actually but this system now have a Exchange server and Unity 7 and customer have bought a domain name from the provider. It is different from our local domain.
Can you share me about how to change the domain name
1. I just follow the microsoft guide to change the domain name
2. Which component in IPCC system will effect? Are there any down time when I change the domain name?
Thank you,
Thanh -
VG224 - some ports show "unregistered" after changing domain name
hi,
recently i have changed the domain name of a VG224, before the change, all ports shows "registered" from the CUCM.
after I changed the domain name from VG224 and CUCM, the VG224 can be registered to CUCM, and some ports can register too...only serveral ports showing "unregistered" in the CUCM. But from the VG224, everything is normal. and call/ fax can be made successfully from those "unregistered" ports.
anyone has idea what's going on?
thanks.Melany,
Sorry for the delay,
I have had a look at bugs etc.
The only one I can find that may be related is:-
Change MGCP gateway Domain Name only reset endpoints not whole gateway
CSCsg39923
Description
Symptom:
Incoming and outgoing calls over an MGCP gateway fails randomly after changing gateway's domain name in CallManager. Sometimes caller receives dead air.
Conditions:
The administrator changes the gateway domain name in CCM without stopping Gateway's mgcp service.
Workaround:
Reset or reload the gateway.
Further Problem Description:
The proper way of changing a gateway's domain name is:
- Stop Gateway's mgcp service (gateway command: no mgcp)
- Chnage the domain name in the gateway and in CCM.
- Start Gateway's mgcp service (gateway command: mgcp)
Customer Visible
Save Bug
">
Save Bug
Open Support Case
">
Open Support Case
View Bug in CDETS
">View Bug in CDETS
Was the description about this Bug Helpful?
(0)
Details
Last Modified:
Nov 2,2012
Status:
Fixed
Severity:
3 Moderate
Product:
Cisco Unified Communications Manager (CallManager)
Support Cases:
2
Known Affected Releases:
(1)
4.2
Known Fixed Releases:
(4)
6.0(0.9901.37)
6.0(1.1000.37)
7.0(0.99999.65)
1.0(0.98000.42)
Download software for Cisco Unified Communications Manager (CallManager)
Support Cases:
(2)
Support case links are not customer visible
Related Bugs
Bug(s)
Community Discussion on CSCsg39923 - Cisco Support Community
Regards,
Alex.
Please rate useful posts. -
Cisco ISE y domain whit "_"
Mi cliente maneja un dominio con el caracter "_", pero al intentar configurarlo en el CIsco ISE 1.3, no me permite ingresar el mismo.
Existe alguna posiblidad o no soporta este caracter? mi_dominio_prod.com
My client manages a domain with the character "_", but when trying to configure the Cisco ISE 1.3 does not allow me to enter it.
Is there any possibility or does not support this character? mi_dominio_prod.comOh this is for the CLI...I thought you were talking about the GUI. Unfortunately, underscores are not supported. Check out the Hardware Installation Guide:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/installation_guide/b_ise_InstallationGuide13.pdf
DNS domain name
Cannot be an IP address. Valid characters include ASCII example.com characters, any numerals, the hyphen (-), and the period (.).
example.com
Thank you for rating helpful posts! -
How to batch change domain name in links
Have several hundred PDF files with links to external files. Links were inserted into Word version prior to PDF'ing. Need a utility or batch tool to update the domain name in the links. For example:
Current link: http://abcserver
Must be changed to this: http://zyxserver
Alternate solution might be to batch update the links in the Word files, then batch process new PDF files. (Need advice on how to do batch update of Word files.)
Greatly appreciate prompt help and suggestions.
I have:
Windows XP
Adobe Acrobat 9 Standard
Office 2007One of the experts on this forum, Gilad D, has a tool that does this called Batch Edit URL Links here:
http://try67.blogspot.com.au/2010/03/acrobat-batch-edit-links.html -
Publish iweb site with out changing domain name?
When you go to my website (hmstechnology.com) it changes it to this:
http://hmstechnology.com/hmstechnology/HOME.html
I was uploading via iWeb. Now I am ready to go back to filezilla so that I can just have my domain name remain hmstechnology.com when people visit.
Any suggestions on why Filezilla is changing my domain name, or iWeb for that matter? How can I fix this?
Greatly appreciated,
PhilThis is not so much an iWeb problem as a limitation of your server. If you switch to a hosting company that allows you to name your root folder the same as your domain name and you upload the files only, you will get the URL without the extra folder name.
Having the page name in the URL box is not really a big deal as nobody has to enter it into the browser. If your site is uploaded to a folder named - iberianpigati - and the domain name is pointed at the index.html file inside this folder, all that has to be entered into the browser is...
iberianpigati.com
.... for anybody to get to your landing page.
As has been pointed out, you could forward your domain name using masking/cloaking but this is a very poor choice from the point of view of SEO and bookmarking. If you are more concerned with the look of your individual page URLs than people actually finding your site then masking would be the way to go. -
PORTAL DOESN'T WORK (error:WWC-41439) after CHANGED DOMAIN NAME OF MACHINE.
machine transferred to other location and domain name got changed.I did following
1)changed the old domain to new domain name in jserv.properties file and also in the httpd.conf file.
2)I figured out that intable PORTAL30_SSO.WWSEC_ENABLER_CONFIG_INFO$,the value of column LSNR_TOKEN is= "old doamin "
and LS_LOGIN_URL is =
http://old.domain:7777/pls/portal30_sso/portal30_sso.wwsso_app_admin.ls_login
PLease let me know how I can change old domain values with new doamin in this table.I want to be sure that this change will not affect the old portal application.
PLease try to help resolve the issue ASAP.
Thanks<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by shahid mateen ([email protected]):
machine transferred to other location and domain name got changed.I did following
1)changed the old domain to new domain name in jserv.properties file and also in the httpd.conf file.
2)I figured out that intable PORTAL30_SSO.WWSEC_ENABLER_CONFIG_INFO$,the value of column LSNR_TOKEN is= "old doamin "
and LS_LOGIN_URL is =
http://old.domain:7777/pls/portal30_sso/portal30_sso.wwsso_app_admin.ls_login
PLease let me know how I can change old domain values with new doamin in this table.I want to be sure that this change will not affect the old portal application.
PLease try to help resolve the issue ASAP.
Thanks<HR></BLOCKQUOTE>
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>my concern is I have a portal application which was pointing to old domain and I don't want to lose this application(content area,page,style etc).If I run the ssodatan ,then it will change the content in the table wsec_enabler_config_info$.Please let me know if still it would point to old portal application.<HR></BLOCKQUOTE> -
Will vmware horizon work after change domain name and ip adress and vcenter ?
Hi
i have a question
i have to migrate all of my vmware horizon but for example my domain name is now a.com but i have to migare it to new domain b.comit means my domain name and ip adress will be change also connectios server ip adress vcenter ip adress now i want to know if my domain name and ip adress change and also all of my vm and vcenter and ... change will vmware horizon work after these changes ?
best regards
BabakHorizon View is depended on AD and this task is not trivial.
What needs to be done depends on your setup and configuration and you will need assist from VMware Support and you should first replicate the setup in a test-environment.
// Linjo -
Change Domain name in Hyperion Financial Reporting Web Server
I have System 9.3.1 and i need to change the Domain name from one to another for the web application.
Under which location i can find the domain controller defined??
All the web applications are controlled by Websphere.in version 11.1.2
we can changes web server name at
oracleHOME/user_projects/epmsystem1/httpConfig/ohs/config/OHS/ohs_component
and file name is mod_wl_ohs.conf
is that something you are looking for
Maybe you are looking for
-
No Internet Access thru VPN w/ Windows 8.1
I had VPN working with Internet access & then all of a sudden it stopped working. I suspect one of the Windows AUTO update changed something that made it stop working, but can not be sure. Per other blogs: I tried to temporary disable firewall and a
-
Should I let Windows 8.1 Update Nvidia Video Drivers?
Loading Windows 8.1 to a secondary hard drive in my Early-2009 Mac Pro via Boot Camp was a frustrating exercise. But after four tries it took when I found out that there were problems with the Nvidia graphics board driver. During the final successful
-
I bought my iPad 2 a couple of mounths ago and have synced with iTunes many timse with no problems. I went on my Macbook, opened up iTunes and tried to sync my iPad and the sync button in the lower right is greyed out. This has never happened before.
-
Hi, please help me i m new to sap. can any one help me to learn abap reports with real time programming. Moderator Message Take a classroom course. This is not a Training Forum. Edited by: kishan P on Dec 1, 2010 9:42 AM
-
Possible Defect with Crystal and date formating
Crystal 2008 Oracle 11.1 I am building functionality to override dates within my Crystal/SP by passing a String as a IN/OUT Parameter from Crystal. I have 2 Functions in use that have been tested. The first parses the string and returns a number of d